DataQuest ads on Mac: what it is and how to remove it
DataQuest is an adware that reaches macOS users after they get tricked to install fake Flash Player updates or during the installation of unsafe applications from third-party sites. The app belongs to the prominent Adload campaign - an interconnected network of malicious apps that abuse a built-in AppleScript to deliver additional malicious payloads without user notification.
Facts checked October 7, 2026. Removal steps checked against Apple's current documentation and the security vendors' reports. We have not run the malware on a Mac. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your Mac is infected.
Fortect for Mac scans for malware and unwanted programs, and its free scan shows what it finds before you decide anything.
An automatic scan checks installed programs, startup items and browser extensions for anything that came with DataQuest.
Do it yourself · free Remove DataQuest ads yourself 4 steps, about 12 minutes, no software needed.
Start the steps
DataQuest ads: summary
| Damage | Installation of other malicious software without notification, unsolicited information gathering the background, financial losses due to unwanted activities |
|---|---|
| Name | DataQuest |
| Type | Mac virus, adware |
| Infiltration | Users might get infected with malware after being tricked by fake update prompts that are encountered on scam websites, or during the installation of freeware acquired from unsafe third-party websites |
| Symptoms | Symptoms of the infection might vary from person to person, although typical signs include unknown installed apps or/and extensions, slowdown of the web browser, redirects bring to unknown sites, ads show up on all visited websites, etc. |
| Detected as | According to Virus Total, DataQuest is detected under the following names:[1] Adware.Mac.Loader.17 Gen:Variant.Adware.MAC.AdLoad.1 Malware.OSX/Dldr.Adload.vyogi Trojan-Downloader.OSX.Adload Mac/Virus.Adware.3d4 Not-a-virus:HEUR:AdWare.OSX.Cimpli.k, etc. |
| Removal | Scan the Mac with security software to find the malware and anything installed with it. Fortect for Mac scans for malware and unwanted programs. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 7 more facts
| Malware termination | You can try to get rid of the infection manually, although moving suspicious apps to trash might not be enough, as you will have to find all the malicious files yourself. Instead, you can employ anti-malware software to get rid of malware automatically |
|---|---|
| Detection names | No Microsoft detection name is known |
| Distribution | Not recorded in the old report |
| Evidence | 4 write-ups by security sites; details still limited |
| Program | DataQuest |
| First seen | 24 March 2020 |
| Facts checked | 7 October 2026 |
Is DataQuest ads dangerous?
From our report of Mar 2020 · not reviewed since
DataQuest - a malicious Mac application that is typically installed via fake Flash updates
DataQuest is an adware that reaches macOS users after they get tricked to install fake Flash Player updates or during the installation of unsafe applications from third-party sites.
The app belongs to the prominent Adload campaign - an interconnected network of malicious apps that abuse a built-in AppleScript to deliver additional malicious payloads without user notification. As a result, victims' computers become more infected over time, and only proper computer cleaning can stop the background activities of the DataQuest virus.
Due to the stealthy activity of DataQuest and other applications that might have been inserted without permission, users might not notice the infection immediately. Nevertheless, some of the symptoms may be visible right away, such as modified web browser settings of Safari, Google Chrome, and Mozilla Firefox.
As a result, users can face redirects to various scam sites, pop-up notifications from the macOS like "Utility will damage your computer," increased amount of ads on all websites, a slowdown of the machine, suspicious extensions installed without permission, etc.
Security researchers note that adware has been a growing threat to Mac users. According to experts' reports, Mac malware is now outpacing Windows infection rate, , and one of the major portions of the infections belongs to adware. While DataQuest can be considered as ad-supported software, its distribution and operation methods are much closer to those of malware.
The principle of DataQuest virus activity is very primitive - it is concentrating on delivering users ads, such as pop-ups, deals, offers, banners, in-text links, coupons, and other commercial content. While in some cases, these ads might be marked by an app or a service it is being delivered from, it is highly unlikely to see "Ads by DataQuest" or "Powered by DataQuest" or similar indicators.
When DataQuest is trying to display ads, it will attempt to connect to unknown domains in the background. This way, the pop-ups, and other ads can be called up when users are browsing the web.
This activity may considerably slow down the web browser, and some websites may fail to load entirely. If the slowdowns continue after DataQuest removal, are probably low on space due to funk files - you can get rid of those with tools like .
Although the symptoms of DataQuest infection vary, you may see the following signs of the infection:
Besides these relatively obvious symptoms, there is a lot that the DataQuest adware can do in the background. One of the main activities that should be concerning is data gathering.
Considering that the malware gains elevated permissions on the system, some of the browser extensions might be set to gather all the information you type into your web browser. Besides, adware also usually collects non-personally identifiable information as well, including the IP address, ISP, links clicked, sites visited, search queries, technical details, installed apps, etc.
You should remove DataQuest from your machine as soon as possible, as its deceptive operation might lead to multiple severe consequences, including monetary loss, privacy issues, or even identity fraud. Keep in mind that the app might also be a sign that other threats are already present on the machine, including the notorious Shlayer Trojan.
- Unknown browser extensions added on the web browser (often cannot be removed in a regular way);
- Scareware apps like Advanced Mac Cleaner or Mac Cleanup Pro installed on the system;
- The homepage, new tab address, and the search engine are set to something else;
- Browser redirects bring to scam, phishing, spoofing, fake update, and similar dangerous websites;
- Some websites might fail to load.
From our report of Mar 2020 · not reviewed since
More from our earlier report on DataQuest
- To speedup your macOS and get rid of junk files automatically, employ optimization tool
How to remove DataQuest ads
How to remove DataQuest from a Mac
Remove the app and what starts it, then check the browsers.
Step 1: Delete apps and downloads you did not intend to install
Open the Applications folder and your Downloads folder. Drag any app you did not install, and any disk image (
.dmg), installer (.pkg) or archive (.zip) that came from DataQuest or a site you do not trust, to the Bin, then empty the Bin.Also check
~/Library/Application Supportfor a folder with the same name as the app you removed.Step 2: Remove unknown login items and background items
Open System Settings > General > Login Items & Extensions. Under Open at Login and Allow in the Background, switch off or remove anything you do not recognize, especially items whose developer is shown as an unknown name or that appeared on the day you ran the command.
Then open Finder, choose Go > Go to Folder and check
~/Library/LaunchAgents,/Library/LaunchAgentsand /Library/LaunchDaemons for property list (.plist) files you did not add. Drag suspicious ones to the Bin, then restart the Mac.Step 3: Check the browsers for extensions and changed settings
In Safari open Settings > Extensions and General (homepage). In Chrome open
chrome://extensions, in Firefoxabout:addons.Remove any extension you did not add, and reset the homepage and search engine if they changed. Browsers hold saved passwords and cookies, which is why the password step comes first.
Step 4: Quit what is running that you do not recognize
Open Activity Monitor (in Applications > Utilities, or search for it with Command + Space).
In the CPU or Network tab, look for a process you did not install or whose name is random, select it, click the stop button (the octagon with an X) and choose Quit or Force Quit.
Note the name first: you will look for the same name in the next steps. Malware that comes back after a restart is handled in the next two steps.
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
If you found unwanted browser extensions on Safari that you cannot get rid of - reset the browser:
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Get rid of DataQuest malware by following these steps:
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Choose a proper web browser and improve your safety with a VPN tool
Online spying has got momentum in recent years and people are getting more and more interested in how to protect their privacy online.
One of the basic means to add a layer of security - choose the most private and secure web browser. Although web browsers can't grant full privacy protection and security, some of them are much better at sandboxing, HTTPS upgrading, active content blocking, tracking blocking, phishing protection, and similar privacy-oriented features.
However, if you want true anonymity, we suggest you employ a powerful VPN - it can encrypt all the traffic that comes and goes out of your computer, preventing tracking completely.
Lost your files? Use data recovery software
While some files located on any computer are replaceable or useless, others can be extremely valuable.
Family photos, work documents, school projects - these are types of files that we don't want to lose. Unfortunately, there are many ways how unexpected data loss can occur:
- power cuts
- Blue Screen of Death errors
- hardware failures
- crypto-malware attack
- even accidental deletion
To ensure that all the files remain intact, you should prepare regular data backups. You can choose cloud-based or physical copies you could restore from later in case of a disaster. If your backups were lost as well or you never bothered to prepare any, can be your only hope to retrieve your invaluable files.
From our report of Mar 2020 · not reviewed since
Ways to recognize fake updates and other tips on how to avoid adware and malware on Macs
For many years, Mac power users and even IT experts claimed that Mac malware does not exist, and there is no need to employ any third-party security tools in order to protect it. According to them, the built-in defenses like GateKeeper and XProtect are more than enough - and they would be correct several years ago.
Most of Mac malware nowadays utilize various techniques to bypass these defenses, such as using fake digital signatures that would circumvent GateKeeper's functionality. Additionally, users can always grant permission for malicious files to make changes to the system once they are tricked by a sophisticated phishing alert online.
Thus, it is important to know how Mac malware spreads in order to avoid it in the future. Two main methods are used by cybercriminals:
- Fake Flash updates. This technique is well-known to cybersecurity experts and many regular users, as it has been employed for years. Flash is a plugin that allowed multimedia to be delivered to users from various sites, and they would often see the "Flash required" prompts everywhere. While the technology was long replaced by HTML 5 in 2014, and practically all websites got rid of the flawed Flash Player. Nevertheless, because the plugin is so embedded in users' memories, they still believe that they need it. All in all: do not ever click on Flash update prompts on various sites, as they are fake, and you do not need the plugin as a regular user in the first place.
- Software bundles. Apple Store currently holds more than 1.8 million applications, so there is a good reason to limit downloads from there. Nevertheless, third-party sites often host installers that compile multiple programs - these are often deliberately hidden using various techniques, such as pre-ticked boxes, misleading deals, etc. Thus, always pick Advanced/Custom settings instead of Recommended/Quick ones and get rid of ticks that would otherwise allow the installation of media players, extensions, and other unwanted programs.
From our report of Mar 2020 · not reviewed since
Get rid of DataQuest malware
To remove the DataQuest virus from your machine, taking it to Trash will most likely not suffice.
In some cases, you might not even find the app inside the Applications folder at all, as it can be functioning with the help of other persistence techniques. Some malicious files that are dropped on Mac can continue the unwanted activities even after the main app is terminated. Therefore, to get rid of the adware manually, you should also check the following locations for suspicious .plist and other files:
If you do not want to tamper with files inside your computer, you can perform automatic DataQuest removal with the help of security software. Simply download reputable anti-malware on your system and perform a full system scan - this will also eliminate all the underlying threats you might not be aware of. Finally, reset all the installed web browsers in order to eliminate unwanted browser extensions or settings.
Questions about DataQuest ads
What is DataQuest and why is it on my PC?
DataQuest is a program that was installed on the PC, most likely together with something else you downloaded. Free software sites and many installers add extra programs on setup pages with pre-ticked boxes, so the extra install looks like your choice even though nobody read the page.
Check the install date in Settings, Apps, Installed apps: the program you installed that day is the probable carrier. If you do not need DataQuest, uninstall it. If it belongs to your hardware or to a program you use, search its exact name and publisher first, because drivers and their tools can have unfamiliar names.
DataQuest will not uninstall. What can I do?
First restart the PC and try again, because the program may have been running and locked its own files. If the uninstaller is missing or fails, start Windows in Safe Mode, where most third-party programs do not start, and remove DataQuest from Installed apps there.
If it still refuses, delete its startup entry and its scheduled task, restart, and try once more. A program that actively prevents removal is behaving like malware, so finish with a Microsoft Defender offline scan. Avoid third-party uninstallers offered on search ads; several of them are unwanted programs themselves.
My scan found nothing, but the ads continue. Why?
Because the source may not be a file a scanner looks for. Browser notifications are a permission stored in the browser, and many adware extensions are not flagged because they come from an official store.
Some ad-supported programs are only reported if you enable detection of potentially unwanted apps. So a clean scan does not mean the job is done. Check each browser's notification permissions and extension list by hand, and turn on Potentially unwanted app blocking in Windows Security before scanning again.
Did DataQuest collect my data?
Adware typically collects what it needs to choose ads:
- the sites you visit
- search terms
- approximate location
- browser and system details
Extensions with permission to read and change data on all websites can technically see everything on those pages, including forms. That is a privacy problem rather than proof of theft.
If you typed card details or passwords while it was active, changing the most important passwords is a reasonable precaution. Clearing cookies after removal ends the tracking sessions it may have started.
Why is my browser so slow since the ads started?
Each page now does extra work. An adware extension reads the page, decides where to put ads, loads them from ad servers and reports your visit, and that happens on every tab. Ad-supported programs add their own background activity.
Removing the extension or program usually makes the browser fast again at once. If it stays slow, open the browser's own task manager with Shift+Esc in Chrome or Edge and look for extensions using a lot of memory or processor time.
Can an adware pop-up infect my PC just by appearing?
No. A pop-up, a notification or a new tab is only a web page or a message. It cannot run programs on Windows by itself, provided the browser and Windows are up to date. Infection needs a step from you:
- running a downloaded file
- installing an extension
- giving a stranger remote access
That is why scam pages work so hard to make you click. Close such pages with the tab's X or by closing the browser, not with buttons inside the page, which may start a download.
I let a "support technician" from an ad connect to my PC. What should I do?
Act quickly but calmly. Disconnect the PC from the internet first, so the connection ends. Uninstall the remote access tool they asked you to install and check Installed apps for anything else added during the call.
Run a Microsoft Defender full scan and offline scan. From another device, change your e-mail and banking passwords and sign out of all sessions.
If you paid by card, bank transfer or gift card, contact your bank or the card issuer immediately, and report the scam to the police. Do not answer if they call back.
Is DataQuest a virus?
Not in the strict sense: DataQuest is unwanted software, classed here as an adware extension, not a self-copying virus. Our report lists this damage:
- Installation of other malicious software without notification
- unsolicited information gathering the background
- financial losses due to unwanted activities
Security programs often label such software as adware, a potentially unwanted program or a browser hijacker. It still needs removal, because it changes browser settings, shows ads and can lead you to unsafe pages. The larger risk is clicking an ad that leads to a fake update or scam page.
Will Fortect remove DataQuest?
Fortect for Mac scans for malware and unwanted programs, and its free scan shows what it finds on your Mac before you decide anything.
For DataQuest, follow the plan on this page as well: removing a launch item or an app is done in macOS itself, and a scanner cannot undo what was typed or entered on the infected Mac, such as saved passwords that were copied.
Change your passwords from another device first, and if the page tells you to erase the Mac, a scan is not a substitute. The free scan costs nothing and the full-featured product needs a license.
Sources
- Virus Total: DataQuest (read October 7, 2026)
- Vox: Apple's malware problem is getting worse (read October 7, 2026)
- Threat Post: Adobe Fixes Critical Flash Player Code Execution Flaws (read October 7, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 7, 2026)
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)